Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd30ba4a-d868-3a18-8194-13466b6bd08e.roa
File: fd30ba4a-d868-3a18-8194-13466b6bd08e.roa (raw, json)
Hash identifier: hA6EQOUNiawH3DPgX+ulfg+v/4Wt/5rzyQnhsdOrRAc=
Subject key identifier: B2:02:FE:7A:49:88:83:6A:98:2E:CF:40:75:4E:63:D1:86:BD:3E:BB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315983D397E127ADE2E36C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd30ba4a-d868-3a18-8194-13466b6bd08e.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 21552
IP address blocks: 207.35.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:98:3d:39:7e:12:7a:de:2e:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=18b7302d-1b27-4a84-b985-c8a785a95642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:cd:88:80:f7:aa:30:13:bf:5c:cb:7c:05:
13:dc:4e:61:27:f8:b8:2f:9a:93:99:88:65:89:17:
b6:e9:93:fa:49:5d:59:7f:7c:20:a2:37:dc:ea:c3:
2f:56:07:0d:2e:4a:c0:b9:d8:2a:53:0f:bf:b5:e5:
18:17:fd:c1:df:76:b2:99:2c:db:40:30:16:47:36:
11:3d:68:9c:dc:4e:ce:ee:41:5f:b6:cb:9e:a2:52:
35:e4:e5:09:cc:c0:d8:0d:a3:9d:aa:b0:fb:33:4f:
25:2f:09:63:4f:97:61:75:cf:b7:19:8d:19:83:dd:
e7:b1:27:11:37:32:99:f3:d7:34:07:c4:70:93:aa:
ef:f1:9d:f1:5b:ca:df:13:08:51:09:6e:b6:36:aa:
3f:a7:0d:44:ce:63:6b:52:dd:45:d6:6a:db:e2:71:
41:28:ce:b8:ef:3f:61:11:79:1c:b5:e2:ed:50:a4:
36:a6:43:fa:c0:8b:e5:21:4a:4b:1c:21:23:16:e7:
86:c6:49:0d:0e:55:d9:c0:08:23:e6:6b:72:97:0f:
d5:9f:0b:e2:13:4a:55:28:e8:08:ed:f7:e7:71:01:
f0:f5:75:79:9e:36:33:ae:7a:eb:96:76:a3:46:07:
1b:3b:27:37:00:55:23:d2:86:92:0e:f5:74:8d:62:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:02:FE:7A:49:88:83:6A:98:2E:CF:40:75:4E:63:D1:86:BD:3E:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd30ba4a-d868-3a18-8194-13466b6bd08e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:d6:b6:d8:08:63:18:37:71:17:57:be:7b:5b:e1:c3:7c:9f:
57:98:b5:af:39:6f:a1:5c:d9:48:4c:cd:bd:64:71:c3:07:e1:
5d:85:3f:77:49:97:41:53:e3:35:ac:58:b8:61:7e:9a:d6:cd:
60:71:d3:74:61:0c:72:4f:d2:8d:68:27:04:09:f5:de:63:fe:
af:a7:7f:d6:9b:4b:fe:a9:46:62:ae:ba:6b:6a:74:64:6d:41:
20:a8:80:24:63:c1:f6:45:ee:b6:a0:74:ac:a8:82:cb:75:70:
12:49:b9:15:ce:ca:64:63:02:fa:a3:e1:ea:dc:33:b4:fe:e7:
d7:9d:4b:c2:0b:27:2a:01:bc:7c:91:03:ac:ad:38:50:27:4a:
95:e5:61:28:b1:2f:fc:2c:23:69:cf:25:c9:46:63:89:d5:f8:
2c:9e:81:b2:24:12:ce:d8:26:70:06:b9:be:2a:a3:1f:41:d7:
ef:ab:b5:a0:ef:62:43:26:75:8f:ed:a0:b4:bd:85:10:73:25:
d7:ef:9d:de:ec:fd:7f:a8:48:6a:09:3f:88:3c:ff:fb:81:f1:
e1:a7:02:b7:06:a4:6e:c5:b8:5f:55:cb:3a:cb:a7:08:09:11:
33:64:c7:7a:f7:a5:88:99:f8:29:b7:01:4d:f9:6b:69:7f:1a:
cb:2a:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org